Health Check & Troubleshooting, d8e54e591ad1c349bf6c1675d3f247a013d999a0

CVE, Research URL: d8e54e591ad1c349bf6c1675d3f247a013d999a0
Home page URL: Security reports for Health Check & Troubleshooting
Application: Health Check & Troubleshooting
Published on: Jan 25, 2019
Research Description: Health Check & Troubleshooting [health-check] < 1.2.4 Health Check & Troubleshooting <= 1.2.3 - Path Traversal The Health Check & Troubleshooting plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.2.3 via the POST parameter 'file' where it is used unchecked with 'file_get_contents'. This allows authenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
Affected versions: max 1.2.4.
Status: vulnerable